mirror of
https://github.com/discourse/discourse.git
synced 2025-05-22 22:43:33 +08:00
SECURITY: Attach DiscourseConnect (SSO) nonce to current session (#12124)
This commit is contained in:
@ -877,7 +877,7 @@ RSpec.describe Admin::UsersController do
|
||||
sso.email = "bob@bob.com"
|
||||
sso.external_id = "1"
|
||||
|
||||
user = DiscourseSingleSignOn.parse(sso.payload).lookup_or_create_user
|
||||
user = DiscourseSingleSignOn.parse(sso.payload, secure_session: read_secure_session).lookup_or_create_user
|
||||
|
||||
sso.name = "Bill"
|
||||
sso.username = "Hokli$$!!"
|
||||
|
Reference in New Issue
Block a user